+ $iCcsD^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RIHtH t ^RI t ^RI t ^RI t R]n RtRtRtRtRsRsRsRsRsRsRtRR ltR tR tR tR tRtRtRt Rt!Rt"Rt#Rt$RRlt%!RR4t&Rt'RRlt(Rt)]*R8Xd ])!4R#R#)N)mkdtempmkstempcsVP R\V4R,P4\V4R,, R2#)z: :NNrNN )__name__strupper)ZmsgZcategoryZ _unused_aZ _unused_kwas&&*,;/usr/share/crypto-policies/python/update-crypto-policies.pyr s8CHRL..03s8B<?@Cz/usr/share/crypto-policiesz/etc/crypto-policieszreload-cmds.shz/proc/sys/crypto/fips_enabledcs<\VR\P/VBR#)ZfileN)printsysZstderr)ZargsZkwargss*,r eprintr&s 4+cjj+F+r cs\\PR,s\\PnVeVsM1\PR,s\\Pn \PP\R4s \PP\R4s\PP\R4s\PP\\ 4sR# \ d \sLi;i \ d \sLi;i) profile_dirNbase_dirzlocal.d back-endsZstate)osZenvironrcryptopoliciesUnscopedCryptoPolicyZ SHARE_DIRZKeyErrorDEFAULT_PROFILE_DIRrZ CONFIG_DIRDEFAULT_BASE_DIRpathjoin local_dirbackend_config_dir state_dirRELOAD_CMD_NAMEreload_cmd_pathalt_base&r dir_pathsr!*s*jj/ 8C++5 (zz*-H=EN / / : Xy1Ih < Xw/Iggll;@O! *) * ('H (s"0D0DDDD+*D+cs\P!4p\P!V4\P!R4pRV4p\ V4p\P!V4V#)Z.c3sT"TFwrq1\V4\V43xK R#5iN)sorted)Z.0ZrootZdirsZfiless& r Z Zget_walk..Ps" N4ED6$< /s&()rZgetcwdZchdirwalkr#)rZold_cwdr$& r get_walkr&IsKiikGHHTN 773 A  A cs\\RR7;_uu_4p\VP44^8uuRRR4# +'giR#;i \dR#i;i)Zasciir/NF)r0FIPS_MODE_FLAGZintr1r2)r5 r fips_moderDsH .7 3 3qqvvx=1$4 3 3 3 s-AA A A AA A%$A%c sVVP4VP4r\RR4;_uu_4p\VP44F;pVP R4vrErdW8XgK VP V4uuuRRR4# RRR4R# +'giR#;i)z/proc/self/mountinfoZbrrCNF)Zencoder0ZreversedZ readlinessplitZendswith)Z whatsuffixZwherer5liner?Zwhat_Zwhere_s&& r is_mountedrGs"))+U\\^ $d + +qQ[[]+D)-D)9 &Aq!F~~j11 , ++ ,  , + s5B.B B B( cs\PP\R4p\PP\R4p\ RV4;'d \ RV4#)r-rz$/crypto-policies/default-fips-configz/crypto-policies/back-ends/FIPS)rrrrrGZ policy_fileZbackendsr+r r4r4sR'',,x2Kww||Hk2H ={ K H H>$   $   '',,z3w<69IJK;8 !38HVy0+>'"5"5"5:J+ 0 0EjjlG1v*G4'',,v':; 8gsW55&D!!$99R)+J: 7,'65 1 0:9"!!?vFG ! #7E"&tG9 677655 8 1';77 8 8s4G<I9%I%,H"H H"I,I%0I9< H  HH"I%H""H? ;I%>H? ?I%I" I%!I" "I%% I6 0I96I99JJcsHa]tRtRtoRtR RltRtRtRtRt Rt Vt R #) ProfileConfigi1cs"RVn.VnR#)r'Npolicyr[selfr r __init__ZProfileConfig.__init__2s r cs4VP4PR4pV^,'d V'gV^,VnVR,pVUu.uFqC'gK VNK ppV'dVPP V4R#W0nR#uupi):rN)rrEr`r[Zextend)rbs subpolicylirTr parse_stringZProfileConfig.parse_string6so GGIOOC  Q44 A$DK"A 1QQQ      # #A &  s  B Bcs Rp\VRR7;_uu_4pVFIpVPR^4^,pVP4pV'gK6VPWB4RpKK RRR4R# +'giR#;i)Fr.r/Z#TN)r0rEZstripri)rbrRrfr5rFs&& r parse_fileZProfileConfig.parse_fileAsg (W - -zz#q)!,zz|4%%d6 $I . - - -s4A2A22 B csVP4PR4pVPUu.uF q3V9gK VNK upVnR#uupi)rdN)rrEr[)rbrergrhs&& r remove_subpoliciesZ ProfileConfig.remove_subpoliciesKs> GGIOOC '+'7'7F'7!A:AA'7FFs A A csVPpRPVP4pV'dVR,V,pV#)rd)r`rr[)rbreZsubsr%r __str__ZProfileConfig.__str__Os4 KKxx(() C$Ar cs.\\V44R#r")r rrar r showZProfileConfig.showVs c$ir r_NF) rZ __module__Z __qualname__Z__firstlineno__rcrirjrkrlrmZ__static_attributes__Z__classdictcell__)Z __classdict__s@r r^r^1s) !%Gr r^cs\4p\PP\R4p\P !V\P 4'dVPV4V#\4'dVPR4V#VP\PP\R44V#)r-FIPSzdefault-config) r^rrrrrYrZrjrDrir)r=Z configfiler+r r;r;ZsoGh1J yyRWW%%:& N V$ N 277<< 5EFG Nr c s ^pRpV'dVPpVPV4Rp\PP R4p\ 4pVPV8wdV'dVPR8Xd3V'g*V'g"\ R4\ R4\ R4M?V'd8\ R4\ R 4\ R 4\ R 4\ R 4\\8Xd<\P!4^8wd"\ R 4\P!^4\P!VP.VPO5!p \%4'd\ R4\ R\& R24V'd\)R4\+4Mo\,P,!\PP/\0R44'd\ R\0 R24V#\)R\& R\0 R24V#V'd\)R\3V4,4\5\64U u.uFp RV 9gK V NK p p V Fjp \6P8V ,p V !4pVP;X 4p\AWP>X\B\0\DX PG4VR7Kl V'd#\K\R \3V4R!,4\K\&R#\3V4R!,4\K\&R%\3X 44V'd"\)R'4\)R(4\)R)4V# \PP d-p \ T 4\P!^4Rp ? ELMRp ? i\PP"d0p \ RT 24\P!^4Rp ? ELRp ? ii;iuup i \<d.\ RTP>,4\ R4^pELi;i \Hd/\ RTP>,4\ R4^pEKi;i \Hd\ R"4^pELi;i \Hd\ R$4^pELi;i \Hd\ R&4^pELi;i)*rFTz/usr/bin/bootcrozHWarning: Using 'update-crypto-policies --set FIPS' is not sufficient forz FIPS compliance.zF The kernel must be started with `fips=1` for FIPS compliance.zOWarning: Using 'update-crypto-policies --set' in FIPS mode will make the systemz! non-compliant with FIPS.z4 It can also break ssh access to the system.zJ Reboot without `fips=1` on the kernel command line to disable thez system FIPS mode.z/You must be root to run update-crypto-policies.Nz%Errors found in policy, first one: zDThere's an automatic FIPS policy bind-mount from booting with fips=1zThe information under z might not be accurate.z)Removing automatic FIPS policy bind-mountz *-*.configzThere are drop-in files under z that will beignored in an automatic FIPS policy. To make them effective, manually switch to a FIPS policy by running `update-crypto-policies --set FIPS`.ztConsider switching to a permanent FIPS policy with update-crypto-policies --set FIPS, so that the information under z. is accurate and files that might be added to z! in the future will be in effect.zSetting system policy to Z GeneratorzError generating config for zKeeping original configuration)r\r8zError saving config for r-rz.Error setting the current policy configurationr,z$Error updating current policy markerz CURRENT.polz"Error updating current policy dumpzFNote: System-wide crypto policies are applied on application start-up.zBIt is recommended to restart the system for the change of policieszto fully take place.)&r`rirrrXrDrrrZgeteuidr r3rrr[Z validationZPolicyFileNotFoundErrorZPolicySyntaxErrorr4rr rJrWrrrrLpolicygeneratorsZ__dict__Zgenerate_configZ LookupErrorZ CONFIG_NAMEr]rrZis_emptyr2rU)r=profiler7r8r>Z set_configZ oldpolicyZbootcZis_in_fips_modeZucpZexZgZ generatorsZclsZgenr-s&&&& r r<r<hs CJNN W% /0#+ >>Y &=~~'_456734 ;<:;MN./34## (9@A  11'..H3:3F3FH!"" * +' {2IJK  = > ! # YYrww||I|< = = 3I;?EE F J ++4+666?[A55 6 J )CL89 !12G2kQ6F!!2JG ''*e ((-F   &*I{),)9 ;(  x3w<$+> ? 9iW)<= 9mSX6  5 6 + , $% Jq  $ $ < <r    $ $ 6 67t<=  JH  1COOC D 3 4C   -? @ 3 4C   C DC  56 34s;,M. P$PP "6Q%!R!R#)S.P !N44 PP$PP 4QQ4RRR R #R?>R?SScsD\4\4pVP'd!\4\P!^4VP 'd!\ 4\P!^4\ 4\4pVP'd'VP4\P!^4VPp\W4pVP'g\P!R\.4\P!V4R#)z!The actual command implementationz /bin/bashN)r!r*r6r r3r@r:r;rmZsetr<Z no_reloadrIZcallr)Zcmdliner=rqr>s r mainrrs KlG   }}}   oG|||   kkG w (C    o67HHSMr Z__main__r"rn)NTT)+r)rWrr9rIr ZwarningsZtempfilerrrZcryptopolicies.validationrpZ formatwarningrrrrBrrrrrrrr!r&r*r6r@r:rDrGr4rJrUrVr]r^r;r<rrrrAr r rss  % D3)"0     ,A> *(7t I5  .8f&&R }@B zFr